fde-mock-meeting-transcripts
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The scripts
preflight.pyandcreate_feishu_docs.pyusesubprocess.runto execute system commands. This is primarily used to discover the systemPATHby invoking shells (e.g.,/bin/bash -lic) and to interact with thelark-clitool. These operations are restricted to environment configuration and the skill's primary purpose of document management. - [EXTERNAL_DOWNLOADS]: The skill's documentation guides the user to install the
@larksuite/clipackage vianpx. As this is an official tool from a well-known service provider (Lark/ByteDance), this is considered a safe and standard procedure for extending the agent's capabilities to interact with Feishu. - [DATA_EXFILTRATION]: While the skill interacts with a remote service (Feishu), it does so using the user's own authenticated CLI session. The data being sent consists of the mock meeting transcripts provided within the skill's own assets. There is no evidence of sensitive local data (such as SSH keys or environment secrets) being accessed or exfiltrated.
Audit Metadata